From b08b1eeca736388709381471cebbd80b6e969921 Mon Sep 17 00:00:00 2001 From: Jett Rink Date: Wed, 2 Nov 2022 12:54:47 -0600 Subject: gsctool: add support for AP RO Verification V2 status Implement AP RO Verification V2 status that ti50 will send via the same TPM Vendor command: VENDOR_CC_GET_AP_RO_STATUS See ti50 impl in chrome-internal:5070449 BUG=b:256892104 TEST=manually verified all V2 return values from ti50 Change-Id: I95c071046054075c045d8e698946dc81e55c64dd Signed-off-by: Jett Rink Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/ec/+/3999806 Tested-by: Jett Rink Reviewed-by: Vadim Bendebury Reviewed-by: Mary Ruthven Commit-Queue: Jett Rink --- include/ap_ro_integrity_check.h | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) (limited to 'include') diff --git a/include/ap_ro_integrity_check.h b/include/ap_ro_integrity_check.h index 5803828f8b..0591742cc8 100644 --- a/include/ap_ro_integrity_check.h +++ b/include/ap_ro_integrity_check.h @@ -9,6 +9,7 @@ #include "flash_log.h" enum ap_ro_status { + /* All AP RO Verification V1 statuses are less than 20 */ AP_RO_NOT_RUN = 0, AP_RO_PASS_UNVERIFIED_GBB = 1, AP_RO_FAIL = 2, @@ -17,6 +18,22 @@ enum ap_ro_status { AP_RO_UNSUPPORTED_TRIGGERED = 5, AP_RO_PASS = 6, AP_RO_IN_PROGRESS = 7, + /* All AP RO Verification V2 status are 20 or greater */ + AP_RO_V2_SUCCESS = 20, + AP_RO_V2_FAILED_VERIFICATION = 21, + AP_RO_V2_INCONSISTENT_GSCVD = 22, + AP_RO_V2_INCONSISTENT_KEYBLOCK = 23, + AP_RO_V2_INCONSISTENT_KEY = 24, + AP_RO_V2_SPI_READ = 25, + AP_RO_V2_UNSUPPORTED_CRYPTO_ALGORITHM = 26, + AP_RO_V2_VERSION_MISMATCH = 27, + AP_RO_V2_OUT_OF_MEMORY = 28, + AP_RO_V2_INTERNAL = 29, + AP_RO_V2_TOO_BIG = 30, + AP_RO_V2_MISSING_GSCVD = 31, + AP_RO_V2_BOARD_ID_MISMATCH = 32, + AP_RO_V2_SETTING_NOT_PROVISIONED = 33, + AP_RO_V2_UNKNOWN = 34, }; /* * validate_ap_ro: based on information saved in an H1 RO flash page verify -- cgit v1.2.1